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Abstract 

We show that the hitting time of the discrete time quantum random walk on the n-bit hypercube from 
one corner to its opposite is polynomial in n. This gives the first exponential quantum-classical gap in 
the hitting time of discrete quantum random walks. We provide the framework for quantum hitting time 
and give two alternative definitions to set the ground for its study on general graphs. We then give an 
apphcation to random routing. 



1 Introduction 



Random walks form one of the cornerstones of theoretical computer science as well as the basis of a broad 
variety of applications in mathematics, physics and the natural sciences. In computer science they are 
frequently used in the design and analysis of randomized algorithms. Markov chain simulations provide 
a paradigm for exploring an exponentially large set of combinatorial structures (such as assignments to a 
Boolean formula or matchings in a graph) by a sequence of simple, local transitions. As algorithmic tools 
they have been applied to a variety of central problems, such as approximating the permanent [ JS8S , ISVOl |, 
finding satisfying assignments for Boolean formulas | Sch99 , HSW02 | and the estimation of the volume of 
a convex body [ pFK91 |. Other well-known examples of algorithms based on random walks include 2-SAT, 
Graph Connectivity and probability amplification [ MR95 , Pap94 ]. 

Recently the study of quantum random walks has been initiated, with the hope of bringing new powerful 
algorithmic tools into the setting of quantum computing. To this day nearly all efficient quantum algo- 
rithms are based on the Quantum Fourier Transform (QFT), like Simon's period-finding algorithm [ Sim97 ] 
or Shor's celebrated algorithms for Factoring and Discrete Log [ Sho97 ]. However, it seems that the power 
of the QFT might be limited as a tool to solve similar problems on non-Abelian groups, like Graph Isomor- 
phism [HRTOO, jSVVOI ]. It seems crucial to develop new algorithmic tools. 

Several striking differences between classical and quantum discrete random walks have already been 
observed for walks on the cycle [AAKVOl], the line [ ABN+01] and the hypercube [MROl]. The reason for 
this is quantum interference. Whereas there cannot be destructive interference in a classical random walk, 
in a quantum walk two separate paths leading to the same point may be out of phase and cancel out. The 
focus of previous work has been primarily on the mixing time of a discrete quantum random walk. It has 
been shown that quantum random walks on a large class of graphs can mix nearly quadratically faster than 
their classical counterparts. Since mixing times are an important quantity for many classical algorithms, 
this has raised the question of whether quantum walks can mix exponentially faster. However in [ AAKVOl ] 
a lower bound on the mixing time of any local quantum walk has been obtained, which relates the mixing 
behavior of the walk to the classical conductance of the underlying graph. This result implies in essence that 
quantum walks can mix at most quadratically faster than classical walks (this is exactly true for bounded 
degree graphs; for graphs of maximal degree d this speed-up may be enhanced by a factor of \/d). This 
result showed that in all likelihood quantum walks cannot drastically enhance mixing times of classical 
walks. 

In this paper we set the stage to analyze another crucial quantity of random walks: the hitting time. The 
hitting time is important in many algorithmic applications of classical random walks, Uke k-SAT or Graph 
Connectivity. For instance the most efficient known solution to 3-SAT is based on the hitting time of a 
random walk [ )Sch99 , HSW02]. The hitting time huv of node v starting from node u measures the expected 
time it takes until the walk hits v for the first time. In the quantum case we face a dilemma: as is well known, 
observations of the quantum system (like "Has the walk hit node v?") influence the state of the quantum 
system. In particular if one were to observe the position of the quantum walk at each time it would lose its 
quantum coherence and reduce ("collapse") to the standard classical random walk, in which case we cannot 
expect any non-classical behavior or speed-ups. We give two alternatives out of this dilemma and hence two 
different notions of "quantum hitting time". In the first case the walk is not observed at all. Started at node 
u the position of the walk is measured at a (previously determined) time T . If the probability p to be at node 
V at time T is sufficiently large (an inverse polynomial in the graph size) we call T a "one-shot p hitting 
time". In the second case ("concurrent measurement") we do not require any previous knowledge of when 
to measure the position of the walk. Starting from node u at every step of the walk a partial measurement is 
performed (only the question "Is the position v or not v?" is asked). If the walk is found to have hit node v, 
it is stopped, otherwise the next step follows. This measurement perturbs the walk slightly but does not kill 



1 



all the quantum coherence at once. If after a time T the probability p to halt is bounded below by an inverse 
polynomial in the size of the graph, we call T a "concurrent p hitting time". 

With these notions in place we can show that on the hypercube both definitions of quantum hitting time 
lead to polynomial quantities for the walk from one corner to the opposite corner. This is in stark contrast to 
the classical case, where the corner-to-corner hitting time is exponential. This result provides the first fully 
analytical classical-quantum exponential gap for a quantum random walk on a graph. It opens the possibility 
that quantum algorithms based on random walks may significantly improve upon classical algorithms. A 
possible application of rapid hitting on the hypercube we will outline is "quantum-random" routing in a 
network. 

It is interesting to know how much the exponential speed-up of the quantum walk depends on the choice 
of initial and final position. Although the analysis for arbitrary nodes seems out of reach at the present time, 
we can give two bounds: a lower bound on the size of the neighborhood of one corner from which we still 
achieve polynomial hitting behavior to the opposite corner and an upper bound on this neighborhood. This 



latter derives from a lower bound on quantum unstructured search algorithms [ ]BBBV97[ ]. 

While quantum random walks are very easy to describe, they appear to be quite difficult to analyze. 
Standard techniques for analyzing classical random walks are apparently of little use. Whereas in the clas- 
sical case most quantities depend only on the gap between the first and second largest eigenvalue of the 
underlying chain, in the quantum case all eigenvalues seem to play an equally important role and new tech- 
niques are needed. We hope that our techniques will help to analyze quantum random walks on a variety of 
graphs. 



Related Work: Various quantum variants have previously been studied by several authors. In [ |VIey96| , 
WatOl , AAKVOl , A^BN+Ol ] the general framework for quantum random walks is introduced, yet the focus 
and results of their work is different from ours. The mixing time of the quantum random walk on the 
hypercube has been analysed in [MROl |, both in the discrete and continuous time setting. We use the 



spectral decomposition they obtain for the discrete time walk. However, the results in [MROl] regard only 



the mixing time of the walk and do not deal with hitting times. In [ |ABN+01p a notion of "halting" and 
intermediate partial measurement similar to our concurrent measurement is used, but the results regard the 
total halting probability of the quantum walk, and not the expected hitting time. Numerical studies of the 



hitting time on the hypercube have been communicated to us by Tomohiro Yamasaki [ Yam ] and have been 



reconfirmed in joint work with Neil Shenvi [ |SK[ ]. 

A different model of quantum random walks, so called continuous time walks, has been introduced by 
Farhi and Gutmann [ t^G98| ]. They are defined via a Hamiltonian that stems from the generating matrix of 
the classical continuous random walk. Until now it is not clear how their model is related to the discrete 
case we analyze. Further it is unclear in the general case how to map their walks onto the quantum circuit 
model with local, discrete gates in an efficient way. For their random walk model Farhi and Gutmann exhibit 
an infinite tree and a walk that hits a set of leaves with inverse polynomial probability in polynomial time 
(similar- to our notion of "one-shot hitting time"), where the classical analog has exponential hitting time. 
Later in [ |CFG01 ] another finite graph with a similar property is presented. However, in both cases, the proof 
is only partly analytic and partly numerical (namely the perturbative analysis). Concurrent hitting time for 
the continuous time walk is not considered in these papers. 

For the continuous time walk on the hypercube we calculate the hitting time and show that it is poly- 



nomial and behaves similar to the discrete time case. In [ ]]VIR01[ ] the mixing time of the continuous time 
hypercube is determined and we use the analytic form of the walk (Eq. ([lO|)) to calculate its hitting times. 

Structure of the paper: We begin by reviewing in Sec. ^ the necessary background on classical random 
walks, quantum computation and quantum discrete time random walks on graphs and in particular on the 
hypercube. In Sec. ^ we introduce the relevant definitions of quantum hitting times, and state and prove 
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the upper bounds on quantum hitting times on the hypercube with some technical details in Appendix ^ In 
Sec. we provide upper and lower bounds on the size of the neighborhood of a node from which the quantum 
random walk has polynomial hitting behavior to the opposite comer. In Sec. |5| we outline a quantum routing 
application. In Appendix ^ we compare continuous-time random walks to discrete walks and establish 
analogous results for their hitting time. 



2 Background 
2.1 Random Walks 

We will only state a few specific definitions and theorems to compare the behavior of the classical random 



walks to the quantum case following [ ]MR95| , |AF| ]. 

A simple random walk on an undirected graph G{V,E), is described by repeated applications of a 
stochastic matrix P, where = J- if (m,v) is an edge in G and (i„ the degree of u. If G is connected 
and non-bipartite, then the distribution of the random walk, D' = P'D^^ converges to a stationary distribution 
71 which is independent of the initial distribution D°. If a simple random walk on a bipartite graph has some 
periodicity (there is a state / and an initial distribution such that D ■ > iff t belongs to the arithmetic 
progression {a + ms\m > 0} for some integer a) the introduction of a resting probability will make the walk 
aperiodic and convergent to n. For G which is J— regular, i.e. if all nodes have the same degree, the limiting 
probability distribution is uniform over the nodes of the graph. 

Given an initial state /, the probability that the first transition into a state j occurs at time t is denoted by 
/■J. The hitting time hij is the expected number of steps to reach state j starting from state / and is given by 
hij = Y.tyQtr'jj- For aperiodic simple random walks the Fundamental Theorem of Markov Chains implies 
that the number of times a state / is visited in the stationary state is 1 /ti, and ha = I/ti,. 

Simple random walk on the Hypercube: The stationary distribution of the simple aperiodic random 
walk on the «-bit Hypercube is given by 71, = 1/2". The hitting time from one node / to the opposite comer 
of the cube j is hij > 2"^^. 

Continuous time walk: The theory of continuous time Markov chain closely parallels that of the dis- 
crete time chains. Such a chain is specified by non-negative transition rates qjj. Given that the state of the 
system at time t is Xf = i, the chance that Xf^^t = j is qtjdt. One can define qa = —Y^j^iQij to obtain a 
matrix Q. The state of the system with initial state D° is then given by D' = exp{Qt)D^. All the results on 
convergence and hitting essentially go over to the continuous case with slight modifications. One can "dis- 
cretize" a continuous chain by setting P = exp{Q) or make a discrete chain continuous by setting qtj = pij 
for / / j. Stationary distribution and mean hitting times stay unchanged. 

2.2 Quantum Computation 

The model. Consider a finite Hilbert space ^ with an orthonormal set of basis states 1^) for 5 G The 
states s £ Q. may be interpreted as the possible classical states of the system described by . In general, the 
state of the system, |a), is a unit vector in the Hilbert space itf , and can be written as |a) = L.ve£2'^«k)' where 
Useo. ki p = 1- \^*) denotes the conjugate and (a| denotes the conjugate transpose of |a). (P|a) denotes the 



inner product of |a) and For more details on quantum computing see e.g. [NCOO]. 



A quantum system can undergo two basic operations: unitary evolution and measurement. 

Unitary evolution : Quantum physics requires that the evolution of quantum states is unitary, that is the 
state I a) is mapped to U\a), where U satisfies U -U^ = I, and denotes the transpose complex 
conjugate of U. Unitary transformations preserve norms, can be diagonalized with an orthonormal set 
of eigenvectors, and the corresponding eigenvalues are all of absolute value 1. 
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Measurement : We will describe here only projective (von Neuman) measurements, defined by a set of 
orthogonal projectors {IT, : i £ 1} (U] = IT,, Uj = IT, and UiUj = 8,yn,) such that J^iei^i = 1- The 
output of the measurement of the state |a) is an element / G / with probability | |n, |a) | p, we then say 
that n, was measured. Moreover, the new state of the system after the measurement with outcome / 
is the (normalized) state (||n,|a)||)^'n,|a). We denote the projectors on one basis state 1^) by \s){s\. 

Combining two quantum systems : If 9{a and are the Hilbert spaces of two systems, A and B, then 
the joint system is described by the tensor product of the Hilbert spaces, 53 ^b- If the basis states 
for are {|a)},{|v)}, respectively, then the basis states of ® are {\a) ® |v)}. We use the 

abbreviated notation \a,v) for the state |a) |v). This coincides with the interpretation by which the 
set of basis states of the combined system A, 5 is spanned by all possible classical configurations of 
the two classical systems A and B. 



2.3 Discrete - Time Quantum Random Walk 

It is not possible to define the quantum random walk naively in analogy to the classical walk as a move 
in all directions "in superposition". It is easy to verify [ Mey96| ] that a translationally invariant walk which 



preserves unitarity is necessarily proportional to a translation in one direction. If the particle has an extra 
degree of freedom that assists in his motion, however, then it is possible to define more interesting homo- 



geneous local unitary processes. Following [ ]AAKV01| | we call the extra space the "coin-space" alluding to 



the classical coin that decides upon the direction of the walk. 

More specifically let G{V,E) be a graph, and let be the Hilbert space spanned by states |v) where 
V £V. We denote by N, or \V\ the number of vertices in G. We will only consider J-regular graphs G 
here, but slightly modified definitions can be made in the general case [ [SK| |. Let 9{c be the "coin"-Hilbert 
space of dimension d spanned by the states |1) through \d). Let C be a unitary transformation on ^Ha (the 
"coin-tossing operator"). Label each directed edge with a number between 1 and d, such that for each 
a, the directed edges labeled a form a permutation. For Cayley graphs the labeling of a directed edge is 
simply the generator associated with the edge. Now we can define a shift operator S on iH"^ (gi such 
that S|a,v) = \a,u) where u is the a-th neighbor of v. Note that since the edge labeling is a permutation, S 
is unitary. One step of the quantum walk is given by a local transformation acting on the coin-space only, 
followed by a conditional shift which leaves the coin-space unchanged [ AAKVO l] ] : U = S • (C (8) In)- 



Random Walk on the Hypercube: The hypercube of dimension « is a Cayley graph with N = 2" 
vertices. The position states are bit-strings \x) of length n. We denote by \x) the vertex obtained from \x) by 
conjugating all the bits. The directions can be labeled by the n basis-vectors {| 1), . . . , \n)}, corresponding 
to the n vectors of Hamming weight 1 {\e\),. . . , |e„)}, where e, has a 1 in the /th position. 

Definition 2.1 (Discrete time walk on the hypercube) The symmetric discrete time walk U on the n - di- 
mensional hypercube is acting on a n-2^ dimensional space Hn ® U = S • (C 1) where the shift 
operator S is defined as S : |/,jc) |/,x©e;), i.e. S = Yli=\ 10 ('1 ^^th Si\x) = |x©e,-). The nx n coin 
operator C respects the permutation symmetry of the hypercube so that U is invariant to permutations of 
bits. The initial state of the walk is also symmetric with respect to bit-permutations. If the walk starts in a 
node \x) the initial state is ■^L"^! |/) ^ \x). 



As pointed out in [MROl] the symmetry of the hypercube defines the coin operator C to be of the form 
Cij = a if i = j and C,y = b if i j with two parameters a,b £ C. Unitarity of C further imposes two 
quadratic constraints on a and b, so that finally up to an overall phase all symmetric coins are characterized 
by one real parameter l—2/n < \a\ < 1. Among all these coins the one farthest away from the identity 



operator 1„ is given bya = 2/?i— 1 and b = 2/n [MROl | 
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Note that this discrete time quantum walk collapses to the classical symmetric walk if we perform a 
measurement in the coin-space in the direction-basis after every step of the walk. The resulting classical 
walk with last step in direction / will uniformly change to one of the n — 1 directions j / / with probability 
\b\^ =4/rp- and will return back to the node it came from (direction i) with probability |a|^ = l— 4/«+4/«^. 
This type of classical random walk has a "direction-memory" one step back in time, but can be modeled by 
a (memoryless) Markov chain if we add a directional space to the position space. In other words each node v 
is blown up into n nodes v, where / is the direction the walk came from. This resulting walk has a preference 
to oscillate back and forth between two adjacent nodes and has obviously still an exponential hitting time 
from one corner to its opposite. 

The walk as defined is periodic: nodes with even Hamming weight are visited at even times only, nodes 
with odd Hamming weight at odd times. The inclusion of a "resting" coin-state |0) and an+1 xn + \ coin 
allowing for a self-loop transition ampUtude of a = 2/ («+!) — 1 make this walk aperiodic. To simplify the 
analysis we will only show the results for the periodic case, though; they hold with very sUght modification 
in the aperiodic case as well. 

3 Hitting Times on the Hypercube 

For classical random walks the hitting time of a node v of a walk starting at an initial node i is defined 

as the expected time it takes the walk to reach v for the first time starting from /. Alternatively one can 
define a classical walk that stops upon reaching the node v and define the stopping-time of the walk as the 
expected time for this walk to stop. In the classical case both notions are obviously the same. Care has to 
be appUed to define an analogous notion for a quantum walk. To define "reaching" v we have to circumvent 
the measurement problem. Namely if we were to measure the position of the walk after each step we will 
kill the quantum coherences and collapse the walk onto the corresponding classical walk. There are two 
alternatives: either to let the walk evolve and measure the position of the walk after T iterations ("one- 
shot measurements"), or to perform a partial measurement, described by the two projectors Ilo = |v)(v| 
and III = 1 — Ilo (where |v) is some specific position we wish to "hit") after every step of the iteration 
("concurrent measurement"). A priori these two notions can be very different in the quantum case. We will 
show that for both definitions the hitting time from one corner to its opposite is polynomial. 

Definition 3.1 (One-shot hitting time) A quantum random walk U has a {T,p) one-shot (\(^o),\x)) hitting 
time if \{x\U^ > p. 

Definition 3.2 (|;c) -measured walk) A \x) -measured walk from a discrete-time quantum random walk U 
starting in state |(|)o) is the process defined by iteratively first measuring with the two projectors YIq = YIx = 
\x){x\ and ITi = 1 — Ilo. If^Q is measured the process is stopped, otherwise U is applied and the iteration 
is continued. 

Definition 3.3 (Concurrent hitting time) A quantum random walk U has a {T,p) concurrent (|(|)o),|x)) 
hitting-time if the \x)-measured walk from U and initial state |(|)o) has a probability > p of stopping at a time 
t < T. 

These two different notions presuppose very different behavior of an algorithm exploiting them. In the one- 
shot case we have to know exactly when to measure the walk, which usually means that we have to know 
the dimension of the hypercube or the shape of the graph in more general applications. The advantage of 
the concurrent case is that we do not need any knowledge of when the walk will "hit" the target state. We 
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simply continuously query the walk at the target state until we measure a "hit". This means that we do not 
need to know n, or, in more general applications, we need not know the specific shape or instance of the 
graph. 



3.1 One-shot hitting time 

Theorem 1 The symmetric discrete-time quantum walk with Grover coin on the hypercube of dimension n 
has a {T,p) one-shot hitting time where T is an integer of the same parity as n with 

(1) T = \nandp=\- O(i^) (T is either [fnj or \^n]), 

(2) T=^n± C>(«P) andp=l- 0{^) with < p < 1/2, 

(3) r G [f . - 0(5^), f . + Oi£-Jand P = I - oC-^)). 

The "y^"-window around the exact one-shot measurement time ofnn/2 makes the algorithm more robust 
to measuring at exactly the right time. 

Proof of Theorem 0- To prove the upper bound on the (|x), \x)) hitting time note that by the symmetry 
of the hypercube and the walk U the hitting time is the same for all (|x), \x)) with x G {0, 1}". So w.l.o.g. 
we set \x) = |00. . .0). As already shown in [ |VIR01 ], the n ■ 2" eigenstates of U are of the form \v[) ® |^) 



where \k) = -^T.xe{o.i}" i—^) \^) is the Zj-Fourier transform of |^) for k £ Z2 and the n vectors {|v^) : 
/ = 1 . . . «} for each k are the eigenvectors of the matrix Sk • C, where Sk is the diagonal nxn matrix with 
(Sk)/,„ = 8/,„(-l)'='. 



The symmetric initial state is |»F;„) O |00 . . . 0) := JJl^i \i) 100 . . . 0) (see Def. |1J). For all k, only two 



of the n eigenvectors \v[) have non-zero overlap with \^in) [MROl]. These two eigenvectors are complex 



conjugates, call them \wk) and |w|) and their corresponding eigenvalues are Xk and Xl with X^ = \ — ^ + 
^nV\^\ ~ 1^1) where \k\ is the Hamming weight of k. Let Xk = = cos(0|^| + /sin(0|yt| where cosco,,, = 
1 — Im/n. The entries of \wk) are {wk)i = ^ 7' if ^/ = and {wk)i = ^ if ki = 1. {\i k = and 

\/2y n—\k\ \/2^J\k\ 



k = n there is only one eigenvector, the uniform superposition over all directions, with eigenvalue = 1 
and Xn = —1. When we write out the general eigenvectors this special case will be self-understood.) The 
initial state is a superposition over 2"+^ — 2 eigenvectors [ |MR01 ]: 



\^o):=\'i' in) 0\OO...O)= {akH)+al\wl))<S,\k) (1) 

ke{OA}" 



with ak = ^^.2„+i (vi^-'V"- I^D- Let us denote by |<I>,) = U'{\^in) |00. . .0)) = 'Lxe{Q.i}" ^ \x) 

the state of the system after t iterations, where \u^) is a normalized vector in coin-space. Note that because 
both the walk U and its initial state preserve the bit-permutation symmetry of the hypercube, the only 
consistent coin-state for position 1 11 ... 1) is the completely symmetric state over all directions: \u}^'"^) = 
LLi I') = \^in)- Let us call \ f) = (gi 1 1 1 ... 1) the "target" state. With these quantities in place, a,, 
the amplitude at time t of the particle being in 1 1 1 ... 1), the opposite comer, is 

a,: = al'-' = {f\%) = £ {akX[{^inH) +4X1' {Win\wl)) ■ {U . . A\k) 

ke{o,\}" 

^ 1 2?lCOs((OiO (-1)'^' 1 ^ fA, ,xm . N 

Claim 1 For all t £ [|« — 0{n^), jn + 0{n^)] such that t — n is even \(Xt\ is lower bounded by I — 0{ '"^^"p ) 
/or < p < 1 /2. 
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Proof of Claim 0; Let us split the sum @ into two parts, one where the index m G M := [(1 — 5)n/2, (1 + 
h)n/2\ and one where m ^ M, with 5 < 1 specified later. By standard Chemoff bounds on the tail probabili- 
ties of the binomial distribution we can upper-bound the absolute value of all the contributions from m^M 
as 



-l)'"cos((o,„?) 



< 



1 

2" 



<2e- 



(3) 



Let us set 5 = with g{n) = Q.{\ogn), in which case @ is upper bounded by 2e ^(i°g")/2_ Let us write 

f = |« ± 8 (i.e. 8 = 0{n^)). The second term in the sum will come from contributions m G M , so the terms 



cos CO,,, = 1 — 2m /n G [—5, 5] will be small. Call v,„ = | — COm, so cos (0„ 
means = 1 — 2m /ni: 0(5^). Then 



:COs(f 



--Vm-0{\f„) which 



cos(co„f) = cos[(- - 1 + — ± C>(5^))(-«±8)] = cos[(^— +m)7i=Fe(l )±tO{^^)] 

2 n 2 2 n 



(-i)-(-ircos[^8(i 



2m, 



(4) 



and the second sum ^"^^^m □ (-1)'"cos((o,„0 = - 0{e^8^) - 0{n^d^)]^^,„^M (,")■ Since 

^Imem(::)>1-2^'-^W/2 we have 



|a,| > 



meM 



-I)"' C0S( (i)n,t] 



,2e-«{«)/2>i_(9(l' 

n i 



-2p' 



\n). 



.4g-«(")/2 



(5) 



Set g{n) = 21ogn to prove the claim for < p < 1/2. | 

To prove Theorem |l] note that the probability of measuring the system in 1 11 ... 1) is p = |a, |^. Set (3 = 
^(1 — log log n) and use Eq. (js]) with g{n) = 2 log log « to get p>\ — For P = set g{n) = 2\ogn 

to get a lower bound of 1 — 0{\-0^ n/n). | 

Remark: Note that if we set T = (2m + \ )n%/2 we obtain a similar result to the m = case as long as T 
is sufficiently small so that 0{T^b^) terms do not matter, i.e. m = 0{n). We can think of the walk returning 
to 1 11 . . .) every Tin steps, which is in stark contrast to the classical case where the expected number of times 



a walk returns to some node / is I/ti,- = 2" (see Sec. [2. l| ) 



3.2 Concurrent hitting time 

Theorem 2 The symmetric discrete time quantum walk on the hypercube of dimension n has a 
concurrent (|x),|x)) hitting time. 

This shows that even if we do not have any knowledge of when exactly to measure we can still have an 
inverse polynomially large success probability when measuring concurrently for a time linear in the size of 
the problem. 



Amplification: If the probability p in Defs. \A and 33 is an inverse polynomial p{n) in the size of the 
instance, we can use standard classical amplification to boost this probability to be close to 1. We just restart 
the random walk from scratch and repeat it 0{\/p{n)) times. With amplification the coined symmetric 
discrete-time quantum walk on the hypercube of dimension n has a (0(?i^log^n),n(l)) concurrent 
hitting time. 

Proof of Theorem The str ategy of the proof is to compare the hitting probabilities at time t of the 
1 1 1 . . . 1) -measured walk to the unmeasured walk and to show that the perturbation caused by the measure- 
ment of the walk only gives a polynomial "loss" in hitting amplitude. 
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For the 1 1 1 . . . 1) -measured walk (see Def. 3^) the same symmetry arguments as before apply, since the 
measurement projectors ITo and ITi = / — ITo are also symmetric with respect to bit permutations. So the 
only possible "target" state is again \f) = LLo 10 (8 1 1 1 • • • 1) and we may assume that we measure with 
{rio = |/)(/|,ni = 1 — ITo}. As above let \(^t) be the states of the unmeasured walk after t applications 
of U with |<I>o) = \^in) |00. . . 0) and a? = {f\(^t)- Since the walk has non-zero transition amplitude only 
between nearest neighbors, the first time a, 7^ is for ? = « and since the walk is 2-periodic a, = whenever 
t and n have different parity. 

Let us define |<I>() = {UYliJ {\^in) (X" |00 . . . 0)) as the unnormalised state we get at time t given the walk 
has not stopped before t and % := (/!<!>?). Note that for f < « we have \(^t) = \^t) and a, = Pf . 

Claim 2 The probability to stop at some time t <T is given by pr = YI=o \ {f\^t)f' = TJ=o 



Proof of Claim g[- As in previous work [|ABN_01|] it is easy to see that calculating with the renormalized 
state gives the unconditional probability to stop. If we do not renormalize our states we get exactly the 
conditional probability to stop at time t given we have not stopped before. | 

We now want to relate the from the unmeasured walk to the actual of the measured walk. 

Claim 3 \^n+k) = \%r+k) - Lto ^n+iU'^-'lf) and |3„+^ = a„+^ - iti ^n+k-i ■ Ji with y, = {f\U'\f). 

Proof of Claim By induction on k. By previous arguments we have |<I>f) = |<i>() and ttf = Pf for t <n. Fur- 
ther |<i>„+i) = U\^„) - Uan\f) = \^„+i) - p„[/|/) so p„+i = - a„{f\U\f) = a„+i - P„(/|t/|/). 

Write \^n+k+i) = U\^n+k) — ^n+kU\f) and apply the induction hypothesis to |<i>„+<;). The claim on ^n+k 
follows immediately. | 

Claim 4 Let T = \jn] or s.t. T -nis even, letO <2t <T -n and define % = (-l)'^Y2f- 
l-lt = jp Vm=o (,") cos((o,„f) and y2t+i = 0, 

2. |fe-Y2(.+,)|=0(l^), 

3. 3c s.t. forte = [c^/n\ we have locr-irj ^ 

Proof of Claim^: First note that by the symmetry of the states and U we have that y, = {f\U'\f) = 
(11... 1 O 1 11 ... 1) = O (00 . . . 0|[/'|»F,-„) O |00 . . . 0). Now adapting Eq. (|) with y, = (»F,-J <g) 

(00. ..0\^t)- Since is the amplitude of the initial state at time t starting with the initial state and since 
the walk is 2-periodic, 72?+! rnust be at odd times, which proves Claim ^1. For part ^2 let us write 
as before = 71/2 - (0™ and 72; = ^1",=,) (,!;^)cos(f7i-2fVm) = (-l)'^i;Uo Qcos{2ty,„). Then 72? = 
^Lm=() (m) cos(2fVm). A similar expression can be obtained for |ar-2H for Claim ^.3. The details of the 
proofs of ^2 and ^3 are presented in Appendix 

We now can give a lower bound on | P; | in terms of the quantities of the unmeasured walk: 

Claim 5 Let tc be as in Claim %3. IfJ^do ' \^n+2i\ = o{j^) then \%+2t\ > \o.n+2t\ - |a„+2f-2| - o(y^) 
forT -n- 2tc <2t <{T- n). 

Call P„+2f = (-l)'Pn+2r and a„+2f = (-l)'a«+2f- Adapt Claim| with 72;+! = (Claim|.l.) to get 

P,i+2« = CLn+lt - 52 P«+2f-2,- • 72i = a«+2f " ^n+2{t-l-i) ' % + P«+2(r-l-i) {% " 72(+2) 
i=i i=0 i=0 

Note that 70 = 1 and so 6c„+2f-2 = L;=o P«+2(f-i-i) 'liu which gives the lower bound 
|P«+2r| > |ct„+2r| — |C)C„+2r-2 



f-l _ 

Yj ^n+2(t-\-i){l2i - hi+2] 
i=0 



T-n 

> |C)C„+2f| — \0.n+2t-2\ — 0[ — -^j |Pn+2ii 



,=0 
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T—n T—n ^ 

where we used Claim |.2. Let us spht Y^-^q \ ^n+2i\ = L,="o ' I ^n+2i\ + L;Lo I Pr-2i | The first sum is o( 
by assumption and to upper bound the second sum we use 



;=0 



\^T-2i\ < Y lc^/n\^/PT' 



Now either dt = — 7^-^), which would prove our theorem, or dt = o(- — r — f), which establishes that 
the second sum is also o(j^). | 



If the assumption of Claim | is not true, then = ^.if, \%+2i\ < y^Lilo IP«+2;P < ^^Wr 

which means dt = n( , S )■ 

The rest of Theorem g follows from Claim ^ and Claim ^ 

(l«T|-|ar-L^->j-i|-o(l))\ (|ar|-l/2-o(l))2 

= 1= > 1= (o) 

c^/n c^n 

From Theorem |l] we know | ttj- 1 = 1 — O ( ^^^^ ) which establishes > — o ( ) = H ( ) if the assump- 
tion of Claim ^ is true or pj = ^{ ^^^^2^^ ) if it is not, in both cases proving the theorem. | 

4 Dependence on the initial state 

One might wonder how much this polynomial hitting time depends on the fact that the walk is from one 
vertex to exactly the opposite corner of the hypercube. What if the two states where not exactly in opposite 



corners? Numerical studies [ ]Yam[ ] have shown that if we deviate by only one or two positions from the 
starting state we still obtain polynomial hitting times. However how large can the "polynomially \x) hitting" 
region around \x) be? Clearly a polynomial hitting time can not be true in general. A limit comes from the 



lower bound on quantum unstructured search ([BBBV97|). 



Theorem 3 The number of states \y) in a neighborhood of \x) on an n-bit hypercube (defined e.g. by a 
cut-off Hamming distance from \x)} such that the quantum random walk has a {0{poly{n)),Q.{\ / poly{n)) 
concurrent {\y),\x)) hitting time is 0{poly{n) ■ \/2"). 

Proof of Theorem Let dc be a cut-off distance and define the neighborhood of a node \x) as Nx = {\y) '■ 
dH{x,y) < dc} where du is the Hamming distance. The neighborhood of a node can be defined in any 
arbitrary way, the arguments go through for all of them. We can think of A^^^ as a ball around \x) . Assume 
that for a ball of size M around \x) all \y) G Nx have {0{p{n)),D.{\/q{n)) concurrent {\y), \x) hitting time, 
where p and q are polynomials. Let us cover the hypercube with K balls of size M, where each of the 
balls is centered around a node x\,X2,--- ,xk. A simple probabilistic argument shows that we can achieve 
this with K = 0{n ■ 2" /M) balls. Define a quantum search algorithm as follows: starting in |;ci) launch 



an |A;)-measured quantum random walk as in Def. 3.2, where \x) is the marked state we are searching for 



That means at every step we query the oracle with the current state of the walk and the question "Is this 



the marked state or not?". (We can adapt the standard oracle in Grover's algorithm |Gro96] to behave this 
way by measuring the auxiliary output qubit of the oracle.) We repeat this quantum walk for p{n) steps 
and use classical amplification (repeat q{n) many times). We repeat the amplified walk for each initial 
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state \xi) : i = \ ...K. With probability close to 1 one of the walks will find the marked state. The whole 
algorithm takes 0{p{n) ■ q{n) ■ K) queries. From the query lower bound of n(\/2") for any unstructured 
quantum search algorithm |^BBV97] it follows that K = Q.{\/7P / poly{n)) which yields the upper bound 
onM. I 

Similarly we can argue that the neighborhood A^^^ such that all \y) G A^^^ have a polynomial hitting time 
is at least of size 0{n). To see this assume that with the walk started in \x) we consider the hitting time to 
some neighbor \y) of \x). In the one-shot case the amplitude on \x) at time T = iin/l is close to 1, so at 
time r — 1 all this amplitude is equally distributed over all n neighbors of \x), which means that they all 
have a (r — \,0{\/n)) one-shot hitting time. This kind of argument can be applied several steps; for time 
J — 2nodes \y) with <i//(x,y) =2have 0{\/n^) amplitude and so on. This means that for polynomially sized 
neighborhoods around \x) we get polynomial hitting times to |x) . It is plausible that with shght modifications 
this argument carries through in the concurrent case for \y) measured walks, where \y) is some close neighbor 
of \x). 



5 Quantum Routing 

Here we give an application of the rapid hitting of the |A;)-measured quantum random walk to routing in a 
network. The nodes of the network are bit-strings of length n and each node is connected to all nodes that 
differ by exactly one bit, so that the network has the topology of the hypercube. Consider the scenario in 
which a packet needs to be routed from node x to node y. The quantum routing algorithm is as follows 

(1) Let d = dH{x,y) and consider the sub-cube of dimension d consisting of all strings z such that Zi = xi 
V/ : Xj = yi (i.e. the sub-cube on the bitpositions where x and y differ). The packet will be routed only on this 
sub-cube. The coin-space of the quantum random walk is cf-dimensional; let us call the corresponding coin 
operator Q. 

(2) The quantum random walk is applied T = d^ times (rounded appropriately). At each time step the 
coin Q acts on the appropriate directions followed by the conditional shift. 

(3) After T steps the state of the system is measured. With probability 1 — the packet is at y. 
(3') At each time step node y performs the partial measurement to see if it has received the packet or not. 

After T steps the probability that the packet is at y is ^{~^^^)- case of failure the packet can be resent 

{0{nlog^ n) times) to boost the success probability close to 1. 

This algorithm assumes that either each node v has access to the coin-space (i.e. is capable to apply 
Cd |v) (v|), in which case Q can be either given to them (as a black box) or the bitpositions of the sub-cube 
can be broadcast. The version using (3') is advantageous if T (and d) is not exactly known, like in the black 
box model. Alternatively there can be a central authority in control of the coin space, which applies Q. 

Let us state some quantum advantages of this algorithm when x and y differ in Q.{n) bits (which happens 
almost surely when x and y are chosen at random): If an adversary decides to delete a subexponential number 
of edges randomly, the algorithm is still going to succeed with probability l/poly(n). This is because almost 
surely the deleted edges will be in a region of the hypercube of Hamming weig Since the walk 

spreads symmetrically over all states of same Hamming weight this will induce only an exponentially small 
change in the state of the walk. The walk is only 0{d) steps long so these exponential perturbations cannot 
add up to anything significant. This is also true if a subexponential number of nodes does not cooperate 
in the process. Assume an intermediate node v wishes to intercept the package and starts to perform a 
measurement of the type "Is the packet present in v or not?". From the upper bounds of Theorem ^ we know 
that for almost all nodes v it holds that v can intercept a package only with negligibly small probability. Also 
the nodes do not have to know the origin x and destination y of the packet (except for x(By)- Hence this 
algorithm is robust against a substantial amount of random noise. To our knowledge there is no classical 
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algorithm with these properties. 
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A Technical Details 

Proof of Claim i.2: 



1 " /n\ —2 " 

ht - 121+2 = :^T. [ ['^o^ 2fV;„ - cos(2f + 2)Vm] = ^ L ) sin(2f + 1 )v,„ sin v„ 



(7) 



As before we split the sum in (^ into two parts (m G M and m ^ M), and set 5 = such that the 

Chernoff-tails are 0{^). For the part with m £ M we use again that v„, = 1 — 2m/?i + O(vJ^) and define 
/ = n/2 — m (i.e. = ^ + C?(^)). Then up to terms of C?(^) and with |sin(2? + l)v,„| < 1 we get 



2 8n/2 

\y2t-y2t+2\<^ £ 



2i , i . 



Sn/2 



Note that =0{j=J and / = 0{5'n^), so \y2t - Y2.+2I =oC^).M 
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Proof of Claim |3: 

Using expression with v„, = | — (0^ following the reasoning and notation of Eq. 



m=0 



-ircos((r-20(^-v,„)) = (-l)'?^-':i I (2)cos(2?v,„) + 0(r5^) 



meM 



where we set 5 = A/log « / a/m, so that the Chernoff-tails are and 0(r6 ) = 0{ — ^ 

n/2-m (i.e. = f + so that up to terms of 0{T5^) and with 6 = 4tc/n, 



Set i 



l«7'-2rj 



2" 



) ,^ . cosf ) 



2 

2" 



S«/2 



. I cos(/6) 



(8) 



Let i\ be the largest integer such that /i6 = < |, /2 the largest integer such that < ^ and so on, so ik = 
[gj = Lg^JljJ implying that |f > 4 > - 1- The index k runs from l...KandiK= \^n/2\ , 

which gives ^\/logn + > K > ^\/logn — This means 4 = ^^/n± 0{^/logn). The cosine 

function in Eq. is non-negative for < / < ii and i4k-i < i < Uk+i and non-positive otherwise.Then the 
expression in Eq. (||) becomes 



2 
2" 



;=0 V2 



COS 



< 



2" 



\;=!4H + 1 ^2 
K/4 / 

::)£cos(/e) + £ L 



!4t-l 



m+Li I (/:,)cos(/e)- £ 



!=!4t_3 + l \2 



|cos(/e)| 



'1 



n 

n 

2/ i=0 



j(:=l \2 



Hk-l 



'4/t-l 



£ cos(/e)- I cos (/e) I 

(=(4t-l + l (=i4t-3 + l 



(9) 



cos — sin '■'+''" 

We will make use of the following fact: L/^o^os/S = V ^ — . So L)LoCos('Q) ^ ~ 5 + ^(Q)- 
Also jn („/2-,) ^ ^ {n/i) = ^ + ^(;;572 )• Putting this together we get for the first sum in Eq. @ 



2 '1 
I 



2" 



« \ , 4fc , 2\/2 « 4, \/2 , 1 , 
. cosO— <^— + - =^ + 0(- 



The second term in Eq. (^) can be bounded above by 



2"V«/2y,t'i,=,,r3+i 



Tin 



„3/2. 



/t=l 



sine/2 



Note that cos 



■i4k+l)n r-2t 



'_v/Iog« \ 



m±l^ = cosC^V^'i ± 0{^)) = cosikK + I ± 0{^)) = ^± O(^) and sim 



ilarlysin(^^^±^ = t^ 



±0{- 



/log n \ 

7^ 



j, so 



I I cos(.e) = £ -— 



0(log?i) + 0( 



logn^ 



Putting all the above together we get lar-it^ I ^ + " ) which can be made smaller than ^ with the 

appropriate choice of c. | 
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B Continuous - Time Quantum Random Walk 



The continuous-time walk has been defined by Farhi and Gutmann |FG98] as a quantum version of the 
classical continuous-time walk (see Sec. |2. 1| ). To make the classical continuous walk with generator Q 
quantum one simply sets U (t) = exp{iQt), which is unitary as long as 2 = 2^ (which is the case for simple 
random walks on undirected graphs). This walk works directly with the space formed by the nodes of the 
graph and does not require auxiliary coin spaces. In general, however, it is hard to see how to carry out 
such a walk in a generically programmable way using only local information about the graph. Instead the 
continuous time walk might correspond to special purpose analog computers, where we build in interactions 
corresponding to the desired Hamiltonian Q. 

For the hypercube the continuous time quantum walk is described by the following transformation on 
the space spanned by «-bit strings [ fVIROl ] : 



where X, acts only on the /th bit as X 1 0) = 1 1 ) and X 1 1 ) = 1 0) . The expression in the exponential corresponds 
to the adjacency matrix of the hypercube. The unitary transformation Uwaik{t) can be simulated uniformly 
by a quantum circuit with 0{n) local gates. 

One - shot hitting time: 

Theorem 4 The continuous time quantum random walk has a (r = ™ , 1) and a (T = ™ ztn^, 1 — 0(1 /n^^'^^)) 
one shot hitting time for P = const < 1/2. 

Proof: From e'^^ = cos ^1 + / sin it is easy to calculate the amplitude at of the state 1 1 1 ... 1) in the state 
|<I>r) := U{t)\00...0). It gives |a,| = (sin^)". Write T = 7i«/2±£ with £ = 0(?iP). Then sin^ =sin(7i/2± 
e/n) = \-0{e^/n^). This gives |a,| = {\ -0{n^^/n^))" which is l-0{l/n^-^^) for ^ = const < 1/2. | 
This corresponds exactly to what we have shown in the discrete case Theorem |l]. 

Concurrent hitting time: 

There is some arbitrariness in defining an |x) -measured continuous time walk. If the walk is to be 
continuous one could argue that the measurement ("Is the state \x) or not?") should also be continuous. In 
this case the measurements should not be projective, but rather "weak" measurements. We do not wish at 
this stage to introduce a new apparatus of notations and tools, in particular since it is not obvious how to 
model weak measurements on a quantum computer generically. To compare the two models we chose to 
measure the continuous time walk at discrete time intervals (t = 1,2, . . .). 

Definition B.l (|x) -measured walk and concurrent hitting time:) The \x)-measured walk is the iterative 
process where first a measurement with {Ho = (x| , Hi = 1 — Ho} is performed. If \x) is measured the walk 
is stopped, otherwise U^aiki^) is applied and the procedure is repeated. The walk has a {T,p) concurrent 
hitting time if the probability to stop before time T is > p. 



Theorem 5 The continuous time walk on the hypercube has a [T = ^,Q.{-^)) concurrent hitting time. 

Proof: We adapt the notations and claims of the proof of theorem ^. Let and be defined as the 
amplitudes of the target state |/) = 1 1 1 . . . 1) in the unmeasured resp. measured walk at integer times and let 
the unnormalized state of the unmeasured walk at time ? be |<i>,). Then Claim ^ and Claim || hold without 
change with = 

The quantities here are easy to calculate: a, = /"(sin^)" and = (cos^)". This means that —/"a, are 
monotonically increasing and y, are monotonically decreasing for f < T = ™ . This in turn suffices to prove 
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Claim ^ with the modification that now —i"^k > and |Pr+i| > \(^t+i\ — As in Claim^3 we can set 
tc = c^/n and note that |ar-r^ | = (sin f — ■^)" = {'^ ~ ^ + = e^^' up to exponentially small terms. 

Pick c such that |a,| = 1 /2. Then we can adopt Eq. to 



t=n t=T-c^ 



(iL r-c^lP^I)' ^ (i:Lr-c>l«^|-|«^-il)' ^ (1-1/2)^ ^ _^ 
c^/n ~ c^fn cy^ 4c-y/H 



which proves the theorem. | 

Remark: Numerical studies indicate that also in the discrete time case in Theorem § can be improved 
to a hitting probability p = Most likely a refinement of Claim ^ will lead to this bound, which we 

hope to provide in the final version. 
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